blob: 07f09954f13cf235fb97e83c6beaf938ad823464 (
plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
|
#!/usr/bin/python2
import json
import os
import subprocess
import sys
import tarfile
import urllib2
import pwd
import linaro_ldap
def web_sync(url):
if not os.path.exists('./tmp'):
os.mkdir('./tmp')
tf = urllib2.urlopen(url)
with tarfile.open(fileobj=tf, mode="r|gz") as tf:
tf.extractall(path='./tmp')
for p in os.listdir('./tmp'):
os.rename('./tmp/' + p, p)
def ldap_sync():
fname = 'ssh_keys.json'
with open(fname + '.tmp', 'w') as f:
json.dump(linaro_ldap.get_users_and_keys(), f)
os.rename(f.name, fname)
subprocess.check_output(['/usr/sbin/nss_updatedb', 'ldap'])
with tarfile.open('ldap-files.tgz.tmp', 'w:gz') as tf:
tf.add('group.db')
tf.add('passwd.db')
tf.add('ssh_keys.json')
os.rename('ldap-files.tgz.tmp', 'ldap-files.tgz')
def keys(user):
u = pwd.getpwnam(user)
if u.pw_uid < 10000: # local user
with open(os.path.join(u.pw_dir, '.ssh/authorized_keys')) as f:
try:
print f.read().strip('\n')
except:
return
with open('ssh_keys.json') as f:
data = json.load(f)
keys = data.get(user)
if keys:
for key in keys:
print(key[1])
if __name__ == '__main__':
if len(sys.argv) not in (2, 3):
sys.exit('Usage: %s --sync [URL]|<user>' % sys.argv[0])
os.chdir('/var/lib/misc')
if sys.argv[1] == '--sync':
if len(sys.argv) == 3:
web_sync(sys.argv[2])
else:
ldap_sync()
else:
keys(sys.argv[1])
|
